Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A670A78835211F1AF821DB6CE1D38B0.roa
File: 2A670A78835211F1AF821DB6CE1D38B0.roa (raw, json)
Hash identifier: my17jGfALSTbv9RyF4wNaTeJFMcajChYbi7KtFccYcc=
Subject key identifier: 72:EC:27:54:26:72:52:FE:97:8E:F8:4B:52:F8:9A:E5:BA:AD:05:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C61D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A670A78835211F1AF821DB6CE1D38B0.roa
Signing time: Sun 19 Jul 2026 09:13:55 +0000
ROA not before: Sun 19 Jul 2026 09:13:51 +0000
ROA not after: Thu 13 Aug 2026 09:13:51 +0000
asID: 17497
IP address blocks: 156.245.176.0/21 maxlen: 24
156.245.176.0/24 maxlen: 24
156.245.177.0/24 maxlen: 24
156.245.178.0/24 maxlen: 24
156.245.179.0/24 maxlen: 24
156.245.180.0/24 maxlen: 24
156.245.181.0/24 maxlen: 24
156.245.182.0/24 maxlen: 24
156.255.48.0/22 maxlen: 24
156.255.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116253 (0x1c61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:13:51 2026 GMT
Not After : Aug 13 09:13:51 2026 GMT
Subject: CN=6a5c9553-1789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:6c:82:f9:4a:2d:bc:72:b6:fc:56:13:99:
de:aa:72:e8:25:8a:0e:f8:0f:70:dd:d3:ec:1c:09:
55:13:1d:8c:ed:70:28:36:db:b0:21:fd:d7:42:19:
01:b7:a8:93:b4:33:34:d6:f6:9d:5d:00:86:83:e2:
b3:35:88:9f:ca:0c:2e:25:4a:1b:be:a4:6d:ee:89:
ef:d7:cf:f7:c2:98:bc:14:58:74:73:c6:2d:bc:8e:
63:ce:b5:e2:da:32:ad:a8:54:b3:cb:6e:2d:3f:e3:
6b:3e:5f:ed:7f:ea:1a:7c:d4:d6:95:a7:d5:f2:7b:
25:15:01:87:59:60:f6:dd:78:16:b4:6f:5c:9d:e8:
5a:45:04:d6:72:e1:bc:14:87:e7:11:e9:a6:3b:53:
19:b2:3d:4b:a8:10:39:ec:a7:8b:4c:2b:1b:89:a1:
db:2b:a2:d5:a3:b7:39:f9:2f:fa:b6:13:d5:08:4f:
10:17:88:5c:84:e2:63:15:a9:3d:39:15:6a:d4:76:
db:46:84:f3:13:30:9b:ed:f5:fb:03:2e:c6:dd:af:
6a:c6:6d:f3:47:a4:82:29:0e:9e:6a:ad:7b:4d:bf:
b7:f6:57:54:97:dd:bc:5d:a8:56:93:f4:3f:74:c1:
1b:97:1a:77:c2:56:1d:76:eb:87:c0:48:18:60:7a:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:27:54:26:72:52:FE:97:8E:F8:4B:52:F8:9A:E5:BA:AD:05:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A670A78835211F1AF821DB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/21
156.255.48.0/21
Signature Algorithm: sha256WithRSAEncryption
31:ec:14:e0:db:75:29:c1:9c:75:86:4b:4f:42:ac:cc:ce:02:
d9:5c:54:4c:0c:80:10:2f:69:2e:75:e5:56:1e:9a:5b:60:d2:
fd:ee:38:dc:d1:50:ad:4d:b9:f4:54:ec:e4:1f:8e:bf:23:58:
b7:77:41:e8:7e:65:07:40:a9:c2:d5:4c:a5:0a:98:65:d2:74:
3b:e1:ca:1f:24:cc:10:84:f1:83:5b:13:7c:9c:02:a3:4f:b9:
b5:48:92:88:f4:24:0e:10:91:4d:bd:5b:4d:22:b2:49:1b:6c:
5e:a9:a2:1c:38:72:fd:ef:b7:8a:4e:47:41:60:37:1a:7d:aa:
a2:dc:ac:8f:e7:66:02:ca:7f:bc:a8:50:43:35:d5:f0:41:cd:
6d:24:3b:40:40:63:86:bb:f6:65:12:ec:cd:eb:c7:0a:a0:48:
86:e5:92:8c:ce:43:e6:47:d0:b4:c1:4f:52:f0:ba:52:4f:58:
63:e1:f0:4b:8b:a2:33:9c:be:4f:35:c0:23:e1:f6:57:1f:0d:
01:97:9b:da:32:53:1b:8a:e4:c3:64:fe:16:27:99:19:dc:b2:
a1:69:d1:8b:ce:b8:75:39:ab:8f:28:a6:3a:42:88:cf:a6:a3:
f6:0d:1f:4d:18:c9:b6:17:8f:65:62:8a:5e:43:b9:19:15:69:
8e:54:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:02 2026 by rpki-client